Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
File: 404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa (raw, json)
Hash identifier: 0b0Tp4kzQHbLhbGBjJuFBnQ/0+wopQuqMti3YUtUyp8=
Subject key identifier: 91:10:72:F9:E1:74:1F:D2:56:B4:64:2D:0E:7B:A3:75:51:A2:DC:61
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 11F59D5A3294DCB255EAC5705D46D8AF01C163A9
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
Signing time: Wed 08 Jan 2025 00:00:00 +0000
ROA not before: Wed 08 Jan 2025 00:00:00 +0000
ROA not after: Wed 12 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d017::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f5:9d:5a:32:94:dc:b2:55:ea:c5:70:5d:46:d8:af:01:c1:63:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Jan 8 00:00:00 2025 GMT
Not After : Feb 12 23:59:59 2025 GMT
Subject: serialNumber=7045091988bc84d91a908ef4ac816608510035c0dfe0d759a2590c359f07bd37, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ab:c3:78:79:93:41:37:e2:36:d0:19:2d:a6:
b0:17:1a:5e:56:93:ec:51:ba:6d:2c:c6:e4:01:d9:
f1:fa:3d:12:32:ae:3e:17:bb:f8:ad:2c:8d:a7:b4:
21:05:bb:49:59:23:e6:22:6f:bc:e6:32:6f:5f:12:
3d:8a:c9:c4:dc:a6:dc:bb:01:ab:1d:1b:74:3e:ce:
de:33:04:d3:c5:ea:cb:39:2c:23:6b:df:be:f1:65:
1a:d2:f2:3d:81:aa:ff:2c:fc:d5:a0:a5:2c:0b:f7:
33:58:40:ee:4f:07:15:c9:1b:2c:35:3a:76:e3:9b:
5f:4a:8c:1b:e5:70:bd:01:61:72:88:57:cb:b3:1f:
94:d6:47:61:25:63:79:b4:dd:11:08:eb:c6:0d:eb:
7a:37:70:8b:9b:47:fc:85:11:90:62:63:0a:38:43:
9d:bc:94:c9:84:43:ea:14:ef:48:6e:09:32:c2:0a:
5e:d3:aa:5d:41:ce:9f:bc:fc:53:ba:2e:9c:38:67:
fa:d6:2f:44:fb:0a:82:68:70:aa:7d:51:93:d7:d1:
0d:7e:e8:8a:9a:44:6a:4b:7c:f9:fb:6a:d0:7b:f5:
2d:cf:1a:46:b4:53:c0:e5:9c:59:7f:f5:28:41:ae:
b2:e7:37:3e:e3:c7:4d:36:b6:ec:2c:02:26:07:6b:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:72:F9:E1:74:1F:D2:56:B4:64:2D:0E:7B:A3:75:51:A2:DC:61
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/404ef1af-e052-41b8-a0bf-70e3fa0aa052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d017::/36
Signature Algorithm: sha256WithRSAEncryption
c4:63:ce:36:df:f6:25:d4:9d:73:f7:03:ff:10:b4:12:c3:f6:
e5:e4:4d:cf:5c:52:65:db:01:eb:22:fe:59:26:9f:ae:01:ba:
37:71:ce:76:d4:ca:45:31:8c:07:c9:e2:25:ce:1c:20:0d:75:
8b:99:98:c9:5c:e2:80:27:54:68:c2:61:9d:8e:d8:02:34:f1:
e0:26:35:eb:b0:a4:60:40:4a:0e:ae:49:2b:08:32:ed:5c:d4:
c6:4f:7f:6d:8d:da:e1:50:c7:21:d6:53:05:90:73:8e:f3:24:
fe:d4:c6:05:d9:c7:97:64:af:ca:2d:b4:fb:76:df:12:4e:5b:
7e:dc:6e:2a:07:79:e5:a2:10:be:61:5e:b5:ee:dc:ec:69:d9:
bf:db:43:be:a1:55:77:e2:fa:cc:23:8c:2b:55:c1:2b:bd:93:
62:9e:0c:70:47:db:e1:d9:fd:06:27:ab:c6:05:fb:53:e3:bb:
20:b1:34:ba:cb:55:1b:43:35:cb:55:ef:f0:7b:a5:a4:6d:0b:
1a:9f:81:38:f7:3f:0b:80:46:5c:86:b7:d6:88:90:ed:b5:67:
03:e3:5c:ae:be:2a:1d:4b:63:dc:09:ab:fb:31:e7:b4:d7:be:
09:eb:31:f1:12:8d:cd:fe:19:0b:d2:b4:0d:00:d3:b7:4f:6a:
79:41:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:02:22 2025 by rpki-client